From owner-freebsd-net@FreeBSD.ORG Sun Aug 15 19:21:20 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9F94216A787 for ; Sun, 15 Aug 2004 19:21:20 +0000 (GMT) Received: from shellma.zin.lublin.pl (shellma.zin.lublin.pl [212.182.126.68]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5BBF043D1F for ; Sun, 15 Aug 2004 19:21:20 +0000 (GMT) (envelope-from pawmal-posting@freebsd.lublin.pl) Received: by shellma.zin.lublin.pl (Postfix, from userid 1018) id 68A7A347E01; Sun, 15 Aug 2004 21:19:05 +0200 (CEST) Date: Sun, 15 Aug 2004 21:19:05 +0200 From: Pawel Malachowski To: Fargo Holiday Message-ID: <20040815191905.GC43915@shellma.zin.lublin.pl> References: <4a1299a404081414287a9ecbc@mail.gmail.com> <20040815104243.GA43915@shellma.zin.lublin.pl> <4a1299a4040815113178caa332@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <4a1299a4040815113178caa332@mail.gmail.com> User-Agent: Mutt/1.4.2i cc: freebsd-net@freebsd.org Subject: Re: [FreeBSD 5.2] Bandwith and packet throttling X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Aug 2004 19:21:20 -0000 On Sun, Aug 15, 2004 at 11:31:07AM -0700, Fargo Holiday wrote: > cramster# ipfw show > 00050 14819576 8458459132 divert 8668 ip from any to any via dc0 > 00100 250 32470 allow ip from any to any via lo0 > 00200 0 0 deny ip from any to 127.0.0.0/8 > 00300 0 0 deny ip from 127.0.0.0/8 to any > 65000 44478701 31835950367 allow ip from any to any > 65100 0 0 pipe 1 ip from 10.0.0.8 to any > 65200 0 0 pipe 2 ip from any to 10.0.0.8 > 65535 0 0 deny ip from any to any > > Are those masks valid? Do I need to configure a queue explicitly > before passing these commands? Insert `pipe 1 ip' and `pipe 2 ip' before line 65000, because `allow' terminates packet processing before it reaches pipe now. -- Paweł Małachowski